I would highly recommend that you use CAKE with its diffserv support using DSCPs to carefully manage what to push through the 10Mbit/s download and 1Mbit/s upload - see:
That is, during times of bandwidth saturation, you can leverage the diffserv functionality in CAKE such that DSCPs will govern what will be dropped first, thereby encouraging the dropping of packets belonging to Windows update or Netflix before any gaming packets are dropped.